A pagecache corruption vulnerability in the Linux kernel rxrpc subsystem allows local authenticated attackers to achieve high confidentiality, integrity, and availability impacts.

This is a memory corruption flaw within the rxrpc networking subsystem involving insecure in-place packet decryption during splice operations, requiring local access with low privileges and no user interaction.

A successful exploit can lead to severe system instability, unauthorized data exposure, and complete compromise of host integrity. Given the high CVSS score of 7.8, this flaw poses a substantial risk to multi-tenant or shared environments where local users possess low-privilege shell access.

Immediate Action: Update the Linux kernel to version 6.6.143, 6.12.93, 6.18.35, 7.0.11, or later depending on the active release branch.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or anomalous memory access patterns indicative of exploitation attempts.

Compensating Controls: Restrict local shell access and audit user permissions to ensure only trusted accounts can execute code on the host operating system.

Public Exploit Available: false

The severity of this vulnerability requires prompt attention from systems administration teams managing Linux infrastructure. Apply the relevant kernel updates immediately to eliminate the risk of local pagecache corruption and subsequent system compromise.